Cross-site Scripting (XSS)

pimcore/pimcore is vulnerable to Cross-site Scripting XSS. The vulnerability exists in the getGridFilterCondition at TranslationController.php because the field names are not properly escaped which allows an attacker to inject and execute arbitrary JavaScript...

SQL Injection

pimcore/pimcore is vulnerable to SQL injection. The vulnerability is due to improper sql sanitization in TranslationController.php which allows an attacker to inject malicious SQL queries into the database...